Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/56DD0CD00D1611ED97777262C4F9AE02.roa
File: 56DD0CD00D1611ED97777262C4F9AE02.roa (raw, json)
Hash identifier: afGVWayMvtphSWwNTqdTT+559M9U0jICayFwlFfS8q0=
Subject key identifier: 4F:B3:A0:2E:B3:BF:98:03:0D:94:A9:CE:4B:D7:98:8C:5A:D2:83:D1
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 05F3
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/56DD0CD00D1611ED97777262C4F9AE02.roa
Signing time: Tue 26 Jul 2022 19:08:32 +0000
ROA not before: Tue 26 Jul 2022 19:08:32 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 212238
IP address blocks: 103.125.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1523 (0x5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Jul 26 19:08:32 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62e03baf-4e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:43:82:fa:6f:28:37:45:7b:f0:b3:1d:cf:
f1:62:95:cd:51:f5:ff:f5:ed:94:b9:8b:75:cf:62:
a6:07:54:de:1d:57:29:f5:1b:ac:db:42:e2:96:c6:
64:a6:9c:08:a0:00:47:bb:38:1e:9d:13:8d:f8:46:
ef:07:32:9a:9c:d5:bd:0f:8e:5a:91:8a:ce:22:8b:
55:50:7b:a5:5d:a6:ee:42:e1:4f:4a:34:85:8e:30:
72:fa:22:de:dd:36:27:5c:29:55:95:af:f0:d1:5c:
a2:a6:c5:db:60:04:f1:65:dd:db:de:25:1a:f1:79:
a6:18:7b:56:7a:7b:08:19:bf:ef:ec:11:c0:78:84:
f5:2a:8c:98:b3:fc:72:64:d2:89:60:18:b8:8f:fa:
76:1f:d9:45:ce:f3:eb:03:a6:a1:41:fc:da:62:11:
61:e0:8b:bb:92:d5:43:00:26:9c:93:a9:c1:03:47:
d5:b6:fa:57:9d:da:da:b3:9f:2b:c5:6c:b5:f9:aa:
f9:6d:c0:6c:39:a7:ac:93:d6:bd:f7:83:a5:12:44:
9f:73:66:97:46:7e:3f:5f:92:5a:7e:85:fd:8f:1d:
1a:13:af:0b:65:cf:2f:a6:e3:b2:c1:57:9b:c0:ed:
c0:6c:cb:be:0b:9c:f8:e9:42:7a:18:8e:ef:d5:9f:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B3:A0:2E:B3:BF:98:03:0D:94:A9:CE:4B:D7:98:8C:5A:D2:83:D1
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/56DD0CD00D1611ED97777262C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.146.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5b:9e:f8:31:ab:fb:f7:8d:08:dc:ef:97:92:38:44:58:2f:
72:64:31:79:95:47:42:d0:63:1e:dd:b9:48:80:03:fd:2b:af:
b6:fe:52:b7:4f:ae:0d:b8:b9:ea:50:82:7b:20:56:b5:91:f3:
f8:5a:47:df:1c:70:e1:dc:74:7f:2a:57:ac:0f:f5:46:78:d9:
f8:83:bd:86:2a:94:af:1b:31:17:0d:70:e5:84:13:f4:4e:8e:
27:9b:35:97:5a:81:a3:b1:a0:6b:40:ad:45:55:2d:f3:d5:85:
cd:0c:4e:b2:3c:1e:cc:f1:aa:99:27:bd:58:52:a1:65:16:a3:
65:08:60:d6:3b:9c:53:59:d2:8a:1b:da:ea:2d:e7:db:fd:e2:
3d:97:bf:99:e9:65:a3:2a:58:e5:f7:89:bf:9e:48:98:f3:77:
14:60:0c:33:8c:e5:e7:37:36:09:c4:b5:53:98:9f:3a:a7:e0:
92:c3:cc:0b:3e:38:07:17:bd:19:e6:b6:29:4d:69:9c:6c:b6:
9e:84:cd:19:4d:7c:ff:7b:10:26:c5:1c:15:48:03:3b:76:96:
1f:75:d7:d1:1c:1c:75:41:92:00:24:df:46:a0:cc:8d:3f:5a:
91:5c:e5:4d:d3:2f:f8:15:52:62:fc:3b:f8:ff:63:cb:36:08:
0f:0c:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org